Vulnerabilidades explotables hoy
413,612en la vista actual
Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.
En catálogo KEV1,779
Nuevos KEV · 24H0
Exploit Today ≥ 701,707
Distribución · última ventana
- Crítico5,693
- Alto22,630
- Medio21,130
- Bajo2,150
Filtros
Ventana
Severidad
Filtros
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2025-137976.3 MED94.4%
——28A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.25dCVE-2015-7498—94.4%
——28——CVE-1999-0766—94.4%
——28——CVE-2007-2192—94.4%
——28——CVE-2002-1036—94.4%
——28——CVE-2009-1857—94.4%
——28——CVE-2018-3149—94.4%
——28——CVE-2015-2568—94.4%
——28——CVE-2002-0319—94.4%
——28——CVE-2015-2430—94.4%
——28——CVE-2011-0596—94.4%
——28——CVE-2021-410797.5 ALT94.4%
——28Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service.35dCVE-2007-2949—94.4%
——28——CVE-2025-653637.2 ALT94.4%
——28Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.25dCVE-2002-1436—94.4%
——28——CVE-2024-6385—94.4%
——28——CVE-2009-1611—94.4%
——28——CVE-2011-0029—94.4%
——28——CVE-2019-1063—94.4%
——28——CVE-2008-1189—94.4%
——28——CVE-2002-0406—94.3%
——28——CVE-2014-9350—94.4%
——28——CVE-2009-4634—94.4%
——28——CVE-1999-1030—94.3%
——28——CVE-2016-0753—94.4%
——28——CVE-2004-0007—94.4%
——28——CVE-2013-4243—94.4%
——28——CVE-2009-2257—94.4%
——28——CVE-2025-20029—94.4%
——28——CVE-2017-13261—94.4%
——28——CVE-2018-15713—94.4%
——28——CVE-2007-6701—94.4%
——28——CVE-2002-0959—94.4%
——28——CVE-2006-3074—94.4%
——28——CVE-2015-0538—94.4%
——28——CVE-2020-1238—94.4%
——28——CVE-2016-67945.3 MED94.4%
——28When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager. In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70, 6.0.0 to 6.0.45 the system property replacement feature for configuration files could be used by a malicious web application to bypass the SecurityManager and read system properties that should not be visible.28dCVE-2001-0987—94.4%
——28——CVE-2023-34843—94.4%
——28——CVE-2007-2856—94.4%
——28——